MAL-2025-171101 Malicious code in defihas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2e082ac685c247533937b64102b8c1b32a79d0eafb23f8aa7128d56418c170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbecf078490c826c0b9195fb3215641b207f4af4dd1d3f6d7f888636f223a3c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-spawn-commitlint-config-angular-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a4b690231e8993be588436a23517703f8f8c1099c2280e2dc9aed2d0c9b7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128233 Malicious code in lina-nasiuduk49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f11ea5983f884c5c31133d1f471e728fc3379d7f2bebd7de6a6d3669c0d5399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83790 Malicious code in candra-bakwan1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d385cf80598592a720e9f5ca287930826323646147236613cc3d95d88f419051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urgent-chocolate-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a273c1c6234d0751960f86af38d225fadd99c98eaf03168a847fe6e2258a5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60235 Malicious code in dark_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24618a7a4ddbc280f4c4d63f7d894fe0aa7c5843055be90ae8485a87977a11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...